infrawise 0.10.3 → 0.12.0

package/dist/cli/index.js

@@ -3,10 +3,9 @@ import { readFileSync } from 'fs';
 import { join } from 'path';
 import { Command } from 'commander';
 import { printBanner } from './utils.js';
-import { runInit } from './commands/init.js';
-import { runAuth } from './commands/auth.js';
 import { runAnalyze } from './commands/analyze.js';
-import { runDev } from './commands/dev.js';
+import { runCheck } from './commands/check.js';
+import { runServe } from './commands/serve.js';
 import { runDoctor } from './commands/doctor.js';
 import { runStdio } from './commands/stdio.js';
 import { runStart } from './commands/start.js';
@@ -18,33 +17,22 @@ program
     .version(version);
 program
     .command('start')
-    .description('Set up infrawise and connect your editor — runs init + analyze + writes editor MCP config')
+    .description('Probe environment, generate config, analyze, and connect your editor')
     .option('-c, --config <path>', 'Path to infrawise.yaml', 'infrawise.yaml')
     .option('--claude', 'Write .mcp.json and open Claude Code')
     .option('--cursor', 'Write .cursor/mcp.json and open Cursor')
+    .option('--interactive', 'Run interactive setup wizard instead of auto-discovery')
+    .option('--rediscover', 'Delete existing infrawise.yaml and re-probe the environment')
     .action(async (options) => {
     printBanner();
     await runStart({
         config: options.config !== 'infrawise.yaml' ? options.config : undefined,
         claude: options.claude,
         cursor: options.cursor,
+        interactive: options.interactive,
+        rediscover: options.rediscover,
     });
 });
-program
-    .command('init')
-    .description('Detect AWS profile/region, ask setup questions, and generate infrawise.yaml')
-    .option('--force', 'Overwrite existing infrawise.yaml')
-    .action(async (options) => {
-    printBanner();
-    await runInit({ force: options.force });
-});
-program
-    .command('auth')
-    .description('Validate and select AWS profile from ~/.aws/credentials')
-    .action(async () => {
-    printBanner();
-    await runAuth();
-});
 program
     .command('analyze')
     .description('Load config, run extractors, build graph, and run all analyzers')
@@ -64,27 +52,45 @@ program
     });
 });
 program
-    .command('dev')
-    .description('Start MCP server over HTTP at localhost:3000 (alternative to stdio-based start)')
+    .command('check')
+    .description('CI gate: analyze and exit non-zero if findings reach the threshold severity')
     .option('-c, --config <path>', 'Path to infrawise.yaml', 'infrawise.yaml')
-    .option('-p, --port <number>', 'Port to listen on', '3000')
+    .option('-r, --repo <path>', 'Path to repository to scan', process.cwd())
+    .option('--fail-on <level>', 'Severity that fails the build: high | medium | low', 'high')
     .action(async (options) => {
     printBanner();
-    await runDev({
+    await runCheck({
+        config: options.config !== 'infrawise.yaml' ? options.config : undefined,
+        repo: options.repo,
+        failOn: options.failOn,
+    });
+});
+program
+    .command('serve')
+    .description('Start the MCP server — HTTP by default, or stdio for editor integration')
+    .option('-c, --config <path>', 'Path to infrawise.yaml', 'infrawise.yaml')
+    .option('--stdio', 'Use stdio transport (for editors via .mcp.json) instead of HTTP')
+    .option('-p, --port <number>', 'Port to listen on (HTTP only)', '3000')
+    .action(async (options) => {
+    if (!options.stdio)
+        printBanner();
+    await runServe({
         config: options.config !== 'infrawise.yaml' ? options.config : undefined,
+        stdio: options.stdio,
         port: parseInt(options.port, 10),
     });
 });
+// Hidden backcompat alias: editors launched from a .mcp.json generated before
+// `serve` existed still invoke `infrawise stdio`. Kept out of --help.
 program
-    .command('stdio')
-    .description('Start MCP server on stdio transport — used by editors via .mcp.json (auto-managed)')
+    .command('stdio', { hidden: true })
     .option('-c, --config <path>', 'Path to infrawise.yaml', 'infrawise.yaml')
     .action(async (options) => {
     await runStdio(options.config !== 'infrawise.yaml' ? options.config : undefined);
 });
 program
     .command('doctor')
-    .description('Validate AWS access, postgres connectivity, config, and repo scan')
+    .description('Diagnostic escape hatch: validate AWS/DB access, config, and repo scan')
     .option('-c, --config <path>', 'Path to infrawise.yaml', 'infrawise.yaml')
     .action(async (options) => {
     printBanner();

package/dist/cli/{commands/init.js → interactive-setup.js}

@@ -2,8 +2,8 @@ import * as fs from 'fs';
 import * as path from 'path';
 import chalk from 'chalk';
 import inquirer from 'inquirer';
-import { generateDefaultConfig } from '../../core/index.js';
-import { readAWSProfiles, detectAWSRegion, detectRepoType, log, printHeader } from '../utils.js';
+import { generateDefaultConfig } from '../core/index.js';
+import { readAWSProfiles, detectAWSRegion, log, printHeader } from './utils.js';
 export async function runInit(options = {}) {
     const cwd = process.cwd();
     const configPath = path.join(cwd, 'infrawise.yaml');
@@ -12,12 +12,10 @@ export async function runInit(options = {}) {
         return;
     }
     printHeader('Initialize Infrawise');
-    const repoType = detectRepoType(cwd);
     const repoName = path.basename(cwd);
     const profiles = readAWSProfiles();
     const detectedRegion = detectAWSRegion();
     log.success(`Repository detected`, repoName);
-    log.success(`Type`, repoType);
     log.success(`AWS profiles found`, String(profiles.length));
     console.log('');
     // ── Core settings ──────────────────────────────────────────────────────────
@@ -37,7 +35,6 @@ export async function runInit(options = {}) {
             message: 'Infrastructure:',
             choices: [
                 { name: 'AWS', value: 'aws' },
-                { name: 'LocalStack  (mimics AWS locally)', value: 'localstack' },
                 { name: 'Local  (no cloud — databases, queues, self-hosted services)', value: 'local' },
             ],
         },
@@ -59,12 +56,8 @@ export async function runInit(options = {}) {
         ]);
         awsProfile = answer.awsProfile;
     }
-    else if (provider === 'localstack') {
-        awsProfile = '__localstack__';
-    }
-    // ── Step 3: region + endpoint ─────────────────────────────────────────────
+    // ── Step 3: region ────────────────────────────────────────────────────────
     let region = detectedRegion;
-    let endpoint;
     if (provider !== 'local') {
         const regionAnswer = await inquirer.prompt([
             {
@@ -75,19 +68,8 @@ export async function runInit(options = {}) {
             },
         ]);
         region = regionAnswer.region;
-        if (provider === 'localstack') {
-            const endpointAnswer = await inquirer.prompt([
-                {
-                    type: 'input',
-                    name: 'endpoint',
-                    message: 'LocalStack endpoint:',
-                    default: 'http://localhost:4566',
-                },
-            ]);
-            endpoint = endpointAnswer.endpoint;
-        }
     }
-    const core = { project, awsProfile, region, endpoint };
+    const core = { project, awsProfile, region };
     // ── Databases ──────────────────────────────────────────────────────────────
     console.log('\n  ' + chalk.bold('Databases'));
     console.log(chalk.dim('  Self-hosted databases (PostgreSQL, MySQL, MongoDB).'));
@@ -253,15 +235,12 @@ export async function runInit(options = {}) {
             .map((p) => p.trim())
             .filter(Boolean)
         : [];
-    const isLocalStack = core.awsProfile === '__localstack__';
     const isEnvVars = core.awsProfile === '__env__';
-    const resolvedProfile = isLocalStack || isEnvVars ? '' : core.awsProfile;
-    const resolvedEndpoint = isLocalStack ? (core.endpoint ?? 'http://localhost:4566') : undefined;
+    const resolvedProfile = isEnvVars ? '' : core.awsProfile;
     const configContent = generateDefaultConfig(core.project, {
         aws: {
             profile: resolvedProfile,
             region: core.region ?? detectedRegion,
-            endpoint: resolvedEndpoint,
         },
         dynamodb: { enabled: services.dynamoEnabled, includeTables },
         postgres: {
@@ -296,7 +275,7 @@ export async function runInit(options = {}) {
         console.log('');
         console.log(chalk.bold('  Next steps:'));
         log.info(`Run ${chalk.cyan('infrawise start')} to analyze and connect your editor`);
-        log.info(`Run ${chalk.cyan('infrawise doctor')} to validate your setup`);
+        log.info(`Run ${chalk.cyan('infrawise doctor')} if extraction comes up empty`);
         console.log('');
     }
 }

package/dist/cli/probe.js

@@ -0,0 +1,44 @@
+import * as net from 'net';
+import * as fs from 'fs';
+import * as path from 'path';
+export function probePort(host, port, timeoutMs = 300) {
+    return new Promise((resolve) => {
+        const socket = new net.Socket();
+        const cleanup = (result) => {
+            socket.destroy();
+            resolve(result);
+        };
+        socket.setTimeout(timeoutMs);
+        socket.on('connect', () => cleanup(true));
+        socket.on('timeout', () => cleanup(false));
+        socket.on('error', () => cleanup(false));
+        socket.connect(port, host);
+    });
+}
+export function scanDotEnv(cwd) {
+    const envPath = path.join(cwd, '.env');
+    if (!fs.existsSync(envPath))
+        return {};
+    const result = {};
+    try {
+        const lines = fs.readFileSync(envPath, 'utf-8').split('\n');
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith('#'))
+                continue;
+            const eqIdx = trimmed.indexOf('=');
+            if (eqIdx === -1)
+                continue;
+            const key = trimmed.slice(0, eqIdx).trim();
+            const value = trimmed
+                .slice(eqIdx + 1)
+                .trim()
+                .replace(/^["']|["']$/g, '');
+            result[key] = value;
+        }
+    }
+    catch {
+        // silent — non-critical
+    }
+    return result;
+}

package/dist/cli/utils.js

@@ -1,49 +1,40 @@
 import * as fs from 'fs';
 import * as path from 'path';
-import * as os from 'os';
+import { execSync } from 'child_process';
 import chalk from 'chalk';
 // ─── AWS helpers ─────────────────────────────────────────────────────────────
 export function readAWSProfiles() {
-    const credentialsPath = path.join(os.homedir(), '.aws', 'credentials');
-    const configPath = path.join(os.homedir(), '.aws', 'config');
-    const profiles = new Set();
-    function parseFile(filePath) {
-        if (!fs.existsSync(filePath))
-            return;
-        for (const line of fs.readFileSync(filePath, 'utf-8').split('\n')) {
-            const match = line.match(/^\[(.+)\]$/);
-            if (match?.[1]) {
-                let name = match[1];
-                if (name.startsWith('profile '))
-                    name = name.slice(8);
-                profiles.add(name);
-            }
-        }
+    try {
+        const out = execSync('aws configure list-profiles', {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const profiles = out.trim().split('\n').filter(Boolean);
+        return profiles.length > 0 ? profiles : ['default'];
+    }
+    catch {
+        return ['default'];
     }
-    parseFile(credentialsPath);
-    parseFile(configPath);
-    return profiles.size > 0 ? [...profiles] : ['default'];
 }
-export function detectAWSRegion() {
+export function detectAWSRegion(profile) {
     if (process.env.AWS_DEFAULT_REGION)
         return process.env.AWS_DEFAULT_REGION;
     if (process.env.AWS_REGION)
         return process.env.AWS_REGION;
-    const configPath = path.join(os.homedir(), '.aws', 'config');
-    if (fs.existsSync(configPath)) {
-        const match = fs.readFileSync(configPath, 'utf-8').match(/region\s*=\s*(.+)/);
-        if (match?.[1])
-            return match[1].trim();
+    const target = profile ?? process.env.AWS_PROFILE ?? 'default';
+    try {
+        const region = execSync(`aws configure get region --profile ${target}`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        if (region)
+            return region;
+    }
+    catch {
+        // profile may not have region configured
     }
     return 'us-east-1';
 }
-export function detectRepoType(repoPath) {
-    if (fs.existsSync(path.join(repoPath, 'tsconfig.json')))
-        return 'typescript';
-    if (fs.existsSync(path.join(repoPath, 'package.json')))
-        return 'javascript';
-    return 'unknown';
-}
 // ─── Banner ──────────────────────────────────────────────────────────────────
 function readVersion() {
     try {

package/dist/core/config.js

@@ -8,7 +8,6 @@ export const InfrawiseConfigSchema = z.object({
         .object({
         profile: z.string().optional().default(''),
         region: z.string().optional().default('us-east-1'),
-        endpoint: z.string().optional(),
     })
         .optional()
         .default({ profile: 'default', region: 'us-east-1' }),
@@ -56,7 +55,7 @@ export const InfrawiseConfigSchema = z.object({
     eventbridge: z.object({ enabled: z.boolean().optional().default(true) }).optional(),
     rds: z.object({ enabled: z.boolean().optional().default(false) }).optional(),
     s3: z.object({ enabled: z.boolean().optional().default(false) }).optional(),
-    kafka: z.object({ enabled: z.boolean().optional().default(false) }).optional(),
+    apiGateway: z.object({ enabled: z.boolean().optional().default(false) }).optional(),
     cloudwatchLogs: z
         .object({
         enabled: z.boolean().optional().default(false),
@@ -67,6 +66,11 @@ export const InfrawiseConfigSchema = z.object({
     analysis: z
         .object({
         sampleSize: z.number().int().positive().optional().default(100),
+        hotPartitionThreshold: z.number().int().positive().optional().default(5),
+        hotPartitionThresholds: z
+            .record(z.string(), z.number().int().positive())
+            .optional()
+            .default({}),
     })
         .optional(),
 });
@@ -78,13 +82,32 @@ export class ConfigError extends Error {
         this.name = 'ConfigError';
     }
 }
+const SecretsSchema = z.object({
+    postgres: z.object({ connectionString: z.string() }).optional(),
+    mysql: z.object({ connectionString: z.string() }).optional(),
+    mongodb: z.object({ connectionString: z.string() }).optional(),
+});
+export function loadSecrets(configDir) {
+    const secretsPath = path.join(configDir, '.infrawise', 'secrets.yaml');
+    if (!fs.existsSync(secretsPath))
+        return {};
+    try {
+        const raw = fs.readFileSync(secretsPath, 'utf-8');
+        const parsed = yaml.load(raw);
+        const result = SecretsSchema.safeParse(parsed);
+        return result.success ? result.data : {};
+    }
+    catch {
+        return {};
+    }
+}
 export function loadConfig(configPath) {
     const resolvedPath = configPath
         ? path.resolve(configPath)
         : path.resolve(process.cwd(), 'infrawise.yaml');
     if (!fs.existsSync(resolvedPath)) {
         throw new ConfigError(`Configuration file not found at: ${resolvedPath}`, [
-            'Run `infrawise init` to generate a configuration file',
+            'Run `infrawise start` to generate a configuration file',
             `Or specify a path with --config <path>`,
         ]);
     }
@@ -112,7 +135,19 @@ export function loadConfig(configPath) {
         const details = result.error.issues.map((e) => `  - ${e.path.join('.')}: ${e.message}`);
         throw new ConfigError('Configuration validation failed', details);
     }
-    return result.data;
+    const config = result.data;
+    const configDir = path.dirname(resolvedPath);
+    const secrets = loadSecrets(configDir);
+    if (secrets.postgres?.connectionString && config.postgres) {
+        config.postgres.connectionString = secrets.postgres.connectionString;
+    }
+    if (secrets.mysql?.connectionString && config.mysql) {
+        config.mysql.connectionString = secrets.mysql.connectionString;
+    }
+    if (secrets.mongodb?.connectionString && config.mongodb) {
+        config.mongodb.connectionString = secrets.mongodb.connectionString;
+    }
+    return config;
 }
 export function generateDefaultConfig(projectName, options) {
     const config = {
@@ -120,7 +155,6 @@ export function generateDefaultConfig(projectName, options) {
         aws: {
             profile: options?.aws?.profile ?? '',
             region: options?.aws?.region ?? 'us-east-1',
-            ...(options?.aws?.endpoint ? { endpoint: options.aws.endpoint } : {}),
         },
         dynamodb: {
             enabled: options?.dynamodb?.enabled ?? true,

package/dist/core/errors.js

@@ -72,7 +72,7 @@ export class ConfigError extends InfrawiseError {
             'infrawise.yaml not found in current directory',
             'Missing required fields in configuration',
             details ?? 'Unexpected config error',
-        ], 'infrawise init');
+        ], 'infrawise start');
         this.name = 'ConfigError';
     }
 }

package/dist/graph/index.js

@@ -73,10 +73,28 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
             provider: 'aws',
             hasDLQ: q.hasDLQ,
             encrypted: q.encrypted,
+            isFifo: q.isFifo,
+            visibilityTimeoutSec: q.visibilityTimeoutSec,
             approximateMessages: q.approximateMessages,
             retentionDays: q.retentionDays,
         });
     }
+    for (const api of servicesMeta.apiGateway ?? []) {
+        addNode({
+            id: `api:aws:${api.id}`,
+            type: 'api',
+            name: api.name,
+            provider: 'aws',
+            apiType: api.type,
+            routes: api.routes,
+        });
+        for (const route of api.routes) {
+            if (route.lambdaName) {
+                const lambdaId = `lambda:aws:${route.lambdaName}`;
+                edges.push({ from: `api:aws:${api.id}`, to: lambdaId, type: 'triggers' });
+            }
+        }
+    }
     for (const t of servicesMeta.sns ?? []) {
         addNode({
             id: `topic:aws:${t.name}`,
@@ -402,3 +420,6 @@ export function getEdgeFrequency(graph) {
     }
     return freq;
 }
+export function getAPINodes(graph) {
+    return graph.nodes.filter((n) => n.type === 'api');
+}

package/dist/server/index.js

@@ -8,7 +8,7 @@ import { z } from 'zod';
 import { logger } from '../core/index.js';
 const { version } = JSON.parse(readFileSync(join(import.meta.dirname, '../../package.json'), 'utf8'));
 import { summarizeFindings } from '../analyzers/index.js';
-import { getTableNodes, getFunctionNodes, getQueueNodes, getTopicNodes, getSecretNodes, getParameterNodes, getLogGroupNodes, getLambdaNodes, getEventBridgeRuleNodes, getBucketNodes, getScanEdges, getOutgoingEdges, } from '../graph/index.js';
+import { getTableNodes, getFunctionNodes, getQueueNodes, getTopicNodes, getSecretNodes, getParameterNodes, getLogGroupNodes, getLambdaNodes, getEventBridgeRuleNodes, getBucketNodes, getAPINodes, getScanEdges, getOutgoingEdges, } from '../graph/index.js';
 // ── State ────────────────────────────────────────────────────────────────────
 let currentGraph = { nodes: [], edges: [] };
 let currentFindings = [];
@@ -244,7 +244,7 @@ export function createMcpServer() {
         });
     }));
     mcp.registerTool('get_queue_details', {
-        description: 'Returns all SQS queues with DLQ presence, encryption status, approximate message count, and retention days. Call this when reviewing messaging architecture, investigating a message backlog, or checking DLQ coverage before adding a new consumer. Use get_infra_overview for a quick queue count only.',
+        description: 'Returns all SQS queues with DLQ presence, encryption status, FIFO type (isFifo), visibility timeout, approximate message count, and retention days. When isFifo is true, all SendMessage calls must include a MessageGroupId. Call this when reviewing messaging architecture, investigating a message backlog, checking DLQ coverage, or verifying visibility timeout is set correctly relative to Lambda timeout (should be 6× the Lambda timeout). Use get_infra_overview for a quick queue count only.',
         inputSchema: z.object({}),
     }, logged('get_queue_details', async () => {
         const queues = getQueueNodes(currentGraph);
@@ -256,6 +256,8 @@ export function createMcpServer() {
                 provider: q.provider,
                 hasDLQ: q.hasDLQ,
                 encrypted: q.encrypted,
+                isFifo: q.isFifo ?? false,
+                visibilityTimeoutSec: q.visibilityTimeoutSec,
                 approximateMessages: q.approximateMessages,
                 retentionDays: q.retentionDays,
                 findings: queueFindings
@@ -385,6 +387,24 @@ export function createMcpServer() {
             })),
         });
     }));
+    mcp.registerTool('get_api_routes', {
+        description: 'Returns all API Gateway APIs (REST, HTTP, WebSocket) with their routes, HTTP methods, paths, and the Lambda function each route invokes. Call this before writing any API handler to understand which Lambda handles a route, or when reviewing API surface area and Lambda integration coverage.',
+        inputSchema: z.object({}),
+    }, logged('get_api_routes', async () => {
+        const apis = getAPINodes(currentGraph);
+        return toText({
+            total: apis.length,
+            apis: apis.map((api) => ({
+                name: api.name,
+                type: api.apiType,
+                routes: (api.routes ?? []).map((r) => ({
+                    method: r.method,
+                    path: r.path,
+                    lambda: r.lambdaName ?? null,
+                })),
+            })),
+        });
+    }));
     mcp.registerTool('get_log_errors', {
         description: 'Returns recent error pattern summaries from CloudWatch log groups: pattern counts and frequencies grouped by log group. Raw log messages are never returned. Use the optional logGroup filter to scope to one group by name substring. Call this when investigating errors or identifying log groups with no retention policy.',
         inputSchema: z.object({

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "infrawise",
-  "version": "0.10.3",
+  "version": "0.12.0",
   "mcpName": "io.github.Sidd27/infrawise",
-  "description": "CLI-first infrastructure intelligence platform — analyzes DynamoDB, PostgreSQL, MySQL, MongoDB, SQS, SNS, SSM, Secrets Manager, Lambda, S3, CloudWatch Logs and exposes findings as an MCP server for Claude Code",
+  "description": "CLI-first infrastructure intelligence platform — analyzes DynamoDB, PostgreSQL, MySQL, MongoDB, SQS, SNS, SSM, Secrets Manager, Lambda, S3, API Gateway, CloudWatch Logs and exposes findings as an MCP server for Claude Code",
   "keywords": [
     "mcp",
     "mcp-server",
@@ -32,7 +32,9 @@
     "cli",
     "terraform",
     "cloudformation",
-    "cdk"
+    "cdk",
+    "api-gateway",
+    "sqs-fifo"
   ],
   "agentskills": {
     "infrawise": "./AGENTS.md"
@@ -52,7 +54,7 @@
     "node": ">=24.0.0",
     "pnpm": ">=9.0.0"
   },
-  "packageManager": "pnpm@10.11.0",
+  "packageManager": "pnpm@11.6.0",
   "scripts": {
     "build": "tsc --noEmit false --outDir dist",
     "test": "vitest run --passWithNoTests",
@@ -63,14 +65,16 @@
     "build-arch": "node scripts/build-arch.mjs",
     "generate-diagrams": "node scripts/build-arch.mjs",
     "record": "bash docs/demo/record.sh",
-    "dev": "node dist/cli/index.js dev",
+    "dev": "node dist/cli/index.js serve",
     "release": "node scripts/release.js",
     "prepare": "simple-git-hooks"
   },
   "simple-git-hooks": {
-    "pre-commit": "pnpm format && git add src/ && pnpm lint && pnpm typecheck && pnpm test"
+    "pre-commit": "pnpm format && git add $(git diff --cached --name-only --diff-filter=ACMR) && pnpm lint && pnpm typecheck && pnpm test"
   },
   "dependencies": {
+    "@aws-sdk/client-api-gateway": "^3.1068.0",
+    "@aws-sdk/client-apigatewayv2": "^3.1068.0",
     "@aws-sdk/client-cloudwatch-logs": "^3.1048.0",
     "@aws-sdk/client-dynamodb": "^3.1048.0",
     "@aws-sdk/client-eventbridge": "^3.1051.0",
@@ -99,20 +103,16 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@mermaid-js/mermaid-cli": "^11.15.0",
-    "@types/inquirer": "^9.0.9",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^25.8.0",
     "@types/pg": "^8.11.0",
     "@typescript-eslint/eslint-plugin": "^8.59.3",
     "@typescript-eslint/parser": "^8.59.3",
     "@vitest/coverage-v8": "^4.1.6",
-    "@xmldom/xmldom": "^0.9.10",
     "eslint": "^10.4.0",
     "prettier": "^3.8.3",
     "simple-git-hooks": "^2.13.1",
     "typescript": "^6.0.3",
-    "vite": "^8.0.13",
     "vitest": "^4.1.6"
   },
   "files": [
@@ -121,15 +121,5 @@
   ],
   "publishConfig": {
     "access": "public"
-  },
-  "pnpm": {
-    "overrides": {
-      "qs": ">=6.15.2",
-      "vite": "^7"
-    },
-    "allowedBuildScripts": [
-      "puppeteer",
-      "simple-git-hooks"
-    ]
   }
 }

package/dist/cli/commands/auth.js

@@ -1,54 +0,0 @@
-import chalk from 'chalk';
-import inquirer from 'inquirer';
-import ora from 'ora';
-import { readAWSProfiles, log, printHeader } from '../utils.js';
-import { validateDynamoAccess } from '../../adapters/aws/dynamodb.js';
-export async function runAuth() {
-    printHeader('AWS Authentication');
-    const profiles = readAWSProfiles();
-    if (profiles.length === 0) {
-        log.fail('No AWS profiles found');
-        console.log('');
-        log.info('Run ' + chalk.cyan('aws configure') + ' to set up credentials');
-        log.info('Or manually edit ' + chalk.dim('~/.aws/credentials'));
-        console.log('');
-        return;
-    }
-    log.success(`Found ${profiles.length} profile(s)`);
-    console.log('');
-    const { selectedProfile } = await inquirer.prompt([
-        {
-            type: 'list',
-            name: 'selectedProfile',
-            message: 'Select a profile to validate:',
-            choices: profiles,
-        },
-    ]);
-    console.log('');
-    const spin = ora({
-        text: chalk.dim(`Validating "${selectedProfile}"...`),
-        color: 'cyan',
-    }).start();
-    const testConfig = {
-        project: 'auth-test',
-        aws: { profile: selectedProfile, region: 'us-east-1' },
-    };
-    const isValid = await validateDynamoAccess(testConfig);
-    if (isValid) {
-        spin.succeed(chalk.green(`Profile "${chalk.bold(selectedProfile)}" is valid`));
-        console.log('');
-        console.log(chalk.dim('  Update your infrawise.yaml:'));
-        console.log(chalk.cyan(`  aws:\n    profile: ${selectedProfile}`));
-    }
-    else {
-        spin.fail(chalk.red(`Profile "${chalk.bold(selectedProfile)}" cannot access DynamoDB`));
-        console.log('');
-        log.warn('Possible causes:');
-        log.dim('Missing IAM permissions — need dynamodb:ListTables, dynamodb:DescribeTable');
-        log.dim('Expired SSO — run: aws sso login');
-        log.dim('Wrong region — check your AWS config');
-        console.log('');
-        log.info(`Run ${chalk.cyan('infrawise doctor')} for a full diagnostic`);
-    }
-    console.log('');
-}